| Age | Commit message (Expand) | Author |
|---|
| 2004-04-26 | - make the k field in struct bpf_insn unsigned, as promised in the | Otto Moerbeek |
| 2004-04-26 | Before enqueueing the packet, copy the contents of incoming clusters | Ryan Thomas McBride |
| 2004-04-26 | Prevent biases in arc4random() from disclosing the byte order of the firewall. | Ryan Thomas McBride |
| 2004-04-26 | The rule_number parameter for pf_get_pool() needs to be 32 bits, not 8 - | Ryan Thomas McBride |
| 2004-04-26 | anchor refcounting. ok dhartmei@ mcbride@ | Cedric Berger |
| 2004-04-25 | permit multiple default route. from kame | Jun-ichiro itojun Hagino |
| 2004-04-25 | check for input queue congestion on those as well and call if_congestion when | Henning Brauer |
| 2004-04-25 | prevent an endless loop with route-to lo0, fixes PR 3736, | Daniel Hartmeier |
| 2004-04-25 | get rid of a complete state tree walk at state expire while in splnet() | Philipp Buehler |
| 2004-04-25 | dont splx across functions | Philipp Buehler |
| 2004-04-25 | radix tree with multipath support. from kame. deraadt ok | Jun-ichiro itojun Hagino |
| 2004-04-25 | sync 'other' in test6, too. | Philipp Buehler |
| 2004-04-25 | sync with NetBSD, mostly a Lite2 merge. | Brad Smith |
| 2004-04-25 | don't add PF_GENERATED tag to synproxy generated packets for the second | Daniel Hartmeier |
| 2004-04-25 | undo "oops" commit on 1.14 (radix_mpath). | Jun-ichiro itojun Hagino |
| 2004-04-25 | indentation fix | Jun-ichiro itojun Hagino |
| 2004-04-24 | Add "probability xxx" rule modifier. ok deraadt@ | Cedric Berger |
| 2004-04-24 | be careful about option lengths. ok henning@ mcbride@ | Mike Frantzen |
| 2004-04-17 | unbreak | Henning Brauer |
| 2004-04-17 | when the input queue congestion flag is set stop evaluating the ruleset | Henning Brauer |
| 2004-04-17 | add a congestion indicator to if_queue. It is set when the input queue | Henning Brauer |
| 2004-04-09 | move some of the non-interrupt pools from the small kmem_map to the much | Mike Frantzen |
| 2004-04-05 | make pftag ** (pass pointer by reference), otherwise it's never updated. | Daniel Hartmeier |
| 2004-04-05 | Prevent stale states (states older than the local version) from overwriting | Ryan Thomas McBride |
| 2004-03-31 | in the tcp md5sig case allow empty (wildcard) src or dst | Henning Brauer |
| 2004-03-28 | Check variables in incoming packets which can cause problems if they're set | Ryan Thomas McBride |
| 2004-03-27 | wrap if_down() in splimp; tholo ran into splassert, miod tholo ok | Theo de Raadt |
| 2004-03-26 | Properly m_copyback() modified TCP sequence number after demodulation | Daniel Hartmeier |
| 2004-03-25 | Fix icmp checksum when sequence number modlation is being used. | Ryan Thomas McBride |
| 2004-03-23 | Hold off for 1 second before beginning bulk transfer. Avoids looping | Ryan Thomas McBride |
| 2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride |
| 2004-03-19 | remove trailing ';' in PFLOG_REAL_HDRLEN definition. ok dhartmei@ mcbride@ | Mike Frantzen |
| 2004-03-18 | state->rule.ptr shall not be NULL. from Jon Coller. ok dhartmei@ mcbride@ | Cedric Berger |
| 2004-03-15 | Kill redundant(IPv4) and bogus(IPv6) tests. found+ok dhartmei@ | Cedric Berger |
| 2004-03-15 | plug memory leak in error path | Henning Brauer |
| 2004-03-11 | Don't call pf_src_tree_remove_state() on error in pf_insert_state(), | Ryan Thomas McBride |
| 2004-03-09 | KNF, ok cedric@ deraadt@ | Ryan Thomas McBride |
| 2004-03-02 | don't leak mbuf if uiomove fails; from netbsd; | Markus Friedl |
| 2004-02-28 | - Don't permit 0-padded unit numbers on cloned interfaces. Bug repoprt | Ryan Thomas McBride |
| 2004-02-24 | sysctl knob for bpf tunables. some tips from canacar@ | Ted Unangst |
| 2004-02-24 | Remove redundant logging from pf_test_other(). | Ryan Thomas McBride |
| 2004-02-24 | KNF | Ryan Thomas McBride |
| 2004-02-23 | prevent backward jumps; pls@egsys.hu; ok canacar, deraadt | Markus Friedl |
| 2004-02-20 | Make pfsync deal with clearing states bound to a group or interface (eg | Ryan Thomas McBride |
| 2004-02-19 | Makes pfctl -Fs and pfctl -w works with the optional -i specifier. | Cedric Berger |
| 2004-02-19 | the 2nd round of the qid assignment change. | Kenjiro Cho |
| 2004-02-17 | Tighten pfi_skip_if() up, and a bit of KNF. ok mcbride@ | Cedric Berger |
| 2004-02-15 | 18 -> ETHER_ADDR_LEN*3 in ether_sprintf() for clarity | Anil Madhavapeddy |
| 2004-02-13 | Do an explicit pf_update_anchor_rules() after an anchor gets removed. | Marco Pfatschbacher |
| 2004-02-12 | from camield: | Henning Brauer |
